Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
File: hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft (raw, json)
Hash identifier: OEeGTfh8dPNDMarlQSbMqqxN+kMq3skVYFd42N+f2m0=
Subject key identifier: A2:15:A3:2F:EA:AA:33:0A:28:98:71:11:25:64:3F:BE:99:7D:0C:D7
Authority key identifier: 84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
Certificate issuer: /CN=8405c07192a8106fedb0760b8945032ca1d3054b
Certificate serial: 019873E33AFB848701C8420F7CEE20A43660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
Manifest number: 11D9
Signing time: Mon 04 Aug 2025 07:02:08 +0000
Manifest this update: Mon 04 Aug 2025 07:02:08 +0000
Manifest next update: Tue 05 Aug 2025 07:02:08 +0000
Files and hashes: 1: hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl (hash: 1KjPhF274K9sjB0AK6KX6exOD+onPC0JZu5loQ/WpXo=)
2: nUJoZVEyJ7Ch6Htt7Gy_l4EGdUs.roa (hash: DEXI+dom+CuVEOOs+wIFSM6Zic3MADgfCsnWrZCTC3o=)
3: obW6OP_TwhwF5onkjJQKoKfjNUI.roa (hash: l/D/ppG7tJiDZNB6ndliGGQdEPYg23vbQP0qpyOUO3E=)
4: zTErCzfeAqe_qlccgZ6Xz2BpNCc.roa (hash: 9mx99kal+/jXSa14TzN46OzBllqi4wkCOsaAScYXF7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:3a:fb:84:87:01:c8:42:0f:7c:ee:20:a4:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8405c07192a8106fedb0760b8945032ca1d3054b
Validity
Not Before: Aug 4 07:02:08 2025 GMT
Not After : Aug 5 07:02:08 2025 GMT
Subject: CN=a215a32feaaa330a2898711125643fbe997d0cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:60:6c:a6:c3:e9:9b:ec:dc:a4:32:0c:ac:27:
b5:d2:55:8b:52:92:d0:51:51:cb:61:79:d7:5f:6d:
85:13:3b:65:39:ea:fa:06:42:1a:ce:f8:e9:58:e3:
99:a3:f0:4a:9d:4f:5c:37:ac:46:87:8c:0c:4d:7a:
8b:a5:96:42:f4:b4:34:fc:d7:92:52:1e:4b:52:fc:
4b:0d:d0:57:2f:af:81:ca:23:14:7f:0b:5c:c3:48:
7d:41:7b:71:dc:d1:e6:cd:a1:e7:9d:42:52:ac:a8:
a2:7e:5a:97:4a:36:dc:06:75:d5:95:86:66:4e:50:
57:ae:c5:36:ce:ce:46:f9:66:05:f6:ba:7a:b4:77:
af:3b:cb:38:76:67:f3:37:dd:f6:07:e6:a4:aa:15:
a3:17:66:72:80:c7:bf:d6:2b:1e:e3:04:e3:8e:09:
12:8d:ad:9e:6e:f6:5c:ab:88:e5:3d:be:b7:60:f7:
94:78:36:bf:8e:14:ce:ac:82:91:e8:4c:75:23:8f:
8e:3c:d1:ba:d9:c9:2c:af:e6:39:64:37:38:6e:dc:
91:06:6c:e2:e0:38:94:4e:c5:13:36:f0:08:45:b4:
b8:8d:fa:a8:45:bd:ba:c4:18:89:a3:5c:94:c2:50:
f2:c8:4e:40:25:cb:5e:19:dd:50:1d:51:9c:21:7e:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:A3:2F:EA:AA:33:0A:28:98:71:11:25:64:3F:BE:99:7D:0C:D7
X509v3 Authority Key Identifier:
keyid:84:05:C0:71:92:A8:10:6F:ED:B0:76:0B:89:45:03:2C:A1:D3:05:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hAXAcZKoEG_tsHYLiUUDLKHTBUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f615b0-4d98-4a3d-8bd2-4c93bee27d54/1/hAXAcZKoEG_tsHYLiUUDLKHTBUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:45:1c:90:90:9d:cb:25:76:4f:f5:7c:d9:35:46:a5:3f:62:
2a:13:72:01:ea:70:fa:ba:0e:ef:94:e4:5f:9e:aa:5d:2c:9a:
0f:0f:bf:eb:51:c1:95:e6:cc:7d:74:d3:88:45:29:95:17:b9:
42:2b:74:e3:af:90:ca:05:f0:3c:29:74:8b:05:ce:2d:42:ae:
63:75:b6:69:db:bb:ed:86:6f:62:a8:71:85:8d:39:c2:91:7f:
04:fa:e6:54:60:65:9b:95:ef:fd:d3:8a:1e:62:27:a6:01:66:
e3:4d:1d:b4:d3:f1:ad:3a:22:34:fe:a5:47:36:d5:7a:2b:c9:
a1:bc:ce:16:21:0e:7d:68:c4:91:df:42:6c:bb:5b:8c:e7:06:
36:a8:c1:cb:65:2d:f3:cb:b7:38:8b:eb:82:c6:96:d6:e8:83:
5d:70:7d:99:30:26:4c:ed:9d:d1:53:96:70:44:73:a8:43:ef:
32:69:d4:45:ec:99:dc:a5:d0:48:5f:74:ed:ec:64:af:2a:76:
a1:f3:ee:50:85:3a:be:e9:65:c3:60:77:57:db:bc:f6:1e:e3:
3c:96:8c:79:34:a4:b0:bb:6f:7c:ba:52:79:8f:1c:59:12:14:
72:db:9d:13:fb:0c:84:f0:a8:28:d7:48:93:77:61:43:da:f1:
de:59:b4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:49 2025 by rpki-client